RE: svn client & smartcard certificates

Joe--

Thanks again for all of your help & sorry it's taken me a while to get
back to you. I ran into the same error that Joshua did: svn: Invalid
config: unable to load PKCS#11 provider 'coolkey'.

(Just for kicks I also tried libcoolkey & libcoolkeypk11 with the same
result).

I can confirm that I followed your instructions very precisely,
including the enable-module-path=/usr/lib/pkcs11 on the pakchois
configure.

The only deviations I had to make were:
- Had to compile libgrcypt from src (1.4.0 vs. RHEL5 rpm provided
1.2.3-1)
- Had to compile libgpgerror from src (1.6 to meet libgcrypt dep)
- The configure for subversion 1.5.0 beta 1 required neon 0.28.1 vs.
0.28.2

I have attached a strace for your review, one can clearly see
libcoolkeypk11.so being accessed, but I'm not well versed enough in
strace to go much beyond that.

open("/usr/lib/pkcs11/libcoolkeypk11.so", O_RDONLY) = 4
read(4,
"\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240|\0\0004\0\0\0"...,
512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=130744, ...}) = 0

Thanks again & let me know what else I can provide for you.

- Quint

gnutls-2.3.6
libgcrypt-1.4.0
libgpgerror-1.6
neon-0.28.1
pakchois-0.4
subversion-1.5.0-beta1

-----Original Message-----
From: Joe Orton [mailto:jorton_at_redhat.com]
Sent: Thursday, April 10, 2008 5:08 PM
To: Calahan, Joshua A CTR USAF AFMC AEDC/ATA
Cc: users_at_subversion.tigris.org; Van Deman, Quint CTR US USJFCOM J7
Subject: Re: svn client & smartcard certificates

On Thu, Apr 10, 2008 at 10:54:13AM -0400, Calahan, Joshua A CTR USAF
AFMC AEDC/ATA wrote:
> svn: Invalid config: unable to load PKCS#11 provider 'coolkey'
>
> The only difference from the instructions above is that I'm using the
> 64-bit libcoolkey, i.e. /usr/lib64/pkcs11/libcoolkeypk11.so. As with
> Quint, it works with firefox.

Did you configure pakchois using --enable-module-path=/usr/lib64/pkcs11?

If so, can you run svn under strace to check whether the coolkey .so is
being opened?

joe

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org